samsung Vulnerability Advisory Catalog

Total 1,475 security vulnerabilities recorded for samsung software and firmware.

← Back to All Vendors
Component: android

A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP....

📅 2021-03-26
CVSS 6.1 Dossier →
Component: android

An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory corruption leading to kernel pani...

📅 2021-03-26
CVSS 6.1 Dossier →
Component: android

An improper access control vulnerability in sec_log file prior to SMR MAR-2021 Release 1 exposes sensitive kernel information to userspace....

📅 2021-03-26
CVSS 6.2 Dossier →
Component: cloud

Hijacking vulnerability in Samsung Cloud prior to version 4.7.0.3 allows attackers to intercept when the provider is executed....

📅 2021-03-25
CVSS 3.3 Dossier →
Component: notes

Path Traversal vulnerability in Samsung Notes prior to version 4.2.00.22 allows attackers to access local files without permission....

📅 2021-03-25
CVSS 3.7 Dossier →
Component: internet

Improper access control in Samsung Internet prior to version 13.2.1.70 allows physically proximate attackers to bypass the secret mode's authenticatio...

📅 2021-03-25
CVSS 3.2 Dossier →
Component: notes

Using unsafe PendingIntent in Samsung Notes prior to version 4.2.00.22 allows local attackers unauthorized action without permission via hijacking the...

📅 2021-03-25
CVSS 5.5 Dossier →
Component: internet

Improper input check in Samsung Internet prior to version 13.2.1.46 allows attackers to launch non-exported activity in Samsung Browser via malicious ...

📅 2021-03-25
CVSS 3.3 Dossier →
Component: galaxy_themes

Using empty PendingIntent in Galaxy Themes prior to version 5.2.00.1215 allows local attackers to read/write private file directories of Galaxy Themes...

📅 2021-03-25
CVSS 5.5 Dossier →
Component: bixby_voice

Using PendingIntent with implicit intent in Bixby Voice prior to version 3.0.52.14 allows attackers to execute privileged action by hijacking and modi...

📅 2021-03-25
CVSS 5.5 Dossier →
Component: account

Improper Access Control in EmailValidationView in Samsung Account prior to version 10.7.0.7 and 12.1.1.3 allows physically proximate attackers to log ...

📅 2021-03-25
CVSS 3.2 Dossier →
Component: account

Information Exposure vulnerability in Samsung Account prior to version 12.1.1.3 allows physically proximate attackers to access user information via l...

📅 2021-03-25
CVSS 2.0 Dossier →
Component: slow_motion_editor

Using unsafe PendingIntent in Slow Motion Editor prior to version 3.5.18.5 allows local attackers unauthorized action without permission via hijacking...

📅 2021-03-25
CVSS 5.5 Dossier →
Component: internet

Improper permission grant check in Samsung Internet prior to version 13.0.1.60 allows access to files in internal storage without authorized STORAGE p...

📅 2021-03-04
CVSS 2.1 Dossier →
Component: members

Calling of non-existent provider in Samsung Members prior to version 2.4.81.13 (in Android O(8.1) and below) and 3.8.00.13 (in Android P(9.0) and abov...

📅 2021-03-04
CVSS 4.0 Dossier →
Component: members

Calling of non-existent provider in SMP sdk prior to version 3.0.9 allows unauthorized actions including denial of service attack by hijacking the pro...

📅 2021-03-04
CVSS 4.0 Dossier →
Component: s_assistant

Calling of non-existent provider in S Assistant prior to version 6.5.01.22 allows unauthorized actions including denial of service attack by hijacking...

📅 2021-03-04
CVSS 4.0 Dossier →
Component: android

Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to read or write ...

📅 2021-03-04
CVSS 4.4 Dossier →
Component: one_ui

Improper lockscreen status check in cocktailbar service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows unauthenticated users to acce...

📅 2021-03-04
CVSS 2.5 Dossier →
Component: pay_mini

Improper access control in Samsung Pay mini application prior to v4.0.14 allows unauthorized access to balance information over the lockscreen via sca...

📅 2021-03-04
CVSS 3.2 Dossier →
Component: pay_mini

Improper access control in Samsung Pay mini application prior to v4.0.14 allows unauthorized access to contacts information over the lockscreen in spe...

📅 2021-03-04
CVSS 3.2 Dossier →
Component: pay_mini

Improper access control in Samsung Pay mini application prior to v4.0.14 allows unauthorized access to balance information over the lockscreen in spec...

📅 2021-03-04
CVSS 3.2 Dossier →
CVE-2020-7811 MEDIUM
Component: update

Samsung Update 3.0.2.0 ~ 3.0.32.0 has a vulnerability that allows privilege escalation as commands crafted by attacker are executed while the engine d...

📅 2020-10-12
CVSS 6.2 Dossier →
CVE-2020-25054 CRITICAL
Component: exynos

An issue was discovered on Samsung mobile devices with software through 2020-04-02 (Exynos modem chipsets). There is a heap-based buffer over-read in ...

📅 2020-08-31
CVSS 9.1 Dossier →
Page 52 of 62 (1,475 Total Records)